If the data you’re handling isn’t sensitive in any way (or you can eg. anonymise / pseudonymise it) and you don’t have anything else sensitive on the VM, it wouldn’t really matter either way – and as @MrPoopyButthole@lemmy.dbzer0.com said, if you’re running an executable from some yarrr site you’re probably going to get malware
If the data you’re handling isn’t sensitive in any way (or you can eg. anonymise / pseudonymise it) and you don’t have anything else sensitive on the VM, it wouldn’t really matter either way – and as @MrPoopyButthole@lemmy.dbzer0.com said, if you’re running an executable from some yarrr site you’re probably going to get malware